SAS VA User Authentication from Database

[SASExplorer]

Hi Community,

I've all the users stored in the Database

How to Authenticate SAS VA Users with respect to users stored in Database?

How to Filter data based on the Logged In user?

Regards,

SASExplorer

[SASKiwi]

"I've all the users stored in the Database" - what database is that? SAS VA authenticates against users stored in SAS metadata. Each user will normally have an OS user account stored with it.

I'm not aware of any way you can automatically filter data based on the logged in user.   

[SASExplorer]

Hi @SASKiwi,

Users are stored in an external database i.e., PostgreSQL.

Is there any way to allow the Users stored in the Database for Authentication?

Once the Authentication is Successful, it should allow access SAS VA for that user.

[SASKiwi]

Users have to be authenticated in the SAS metadata server. A common practice is to import user definitions into SAS metadata - for example OS AD accounts under Windows - via a daily synchronisation job. This is just a SAS program which can read the security data. I guess it is possible to also read user data in from another database, but you would have to make sure the user credentials match what is stored in the OS.  

[FredrikE · Accepted solution]

Hi!

As SASKiwi says you can import users from external sources, you have to transform data into a sepecific database format (canonical tables), see:

https://support.sas.com/rnd/papers/sgf07/sgf2007-syncmetadata.pdf
http://support.sas.com/documentation/cdl/en/bisecag/69827/HTML/default/viewer.htm#p1ar98lajfgm4jn1wa...

In VA you can filter data on groups or identities, this is a good start:

https://support.sas.com/resources/papers/proceedings15/SAS1779-2015.pdf

Good luck!

[SASExplorer]

How to implement SSO when the users are stored in Database?

I've checked with SAML Shibboleth, but AD FS is Propritery.

Is there any other open source alternative by which I can implement SSO with my Portal and access SAS VA inside it?

Thank You